# Advantech WebAccess.

Every CVE that names Advantech WebAccess among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Advantech WebAccess Debug Messages Revealing Unnecessary Information](https://agentprime.io/advisories/CVE-2023-4215.md)
  `CVE-2023-4215` · CVE record: Advantech WebAccess · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2023 · Tags: CWE-1295
- [Advantech WebAccess](https://agentprime.io/advisories/CVE-2021-38389.md)
  `CVE-2021-38389` · CVE record: Advantech WebAccess · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 18 Oct 2021 · Tags: Memory corruption
- [Advantech WebAccess](https://agentprime.io/advisories/CVE-2021-33023.md)
  `CVE-2021-33023` · CVE record: Advantech WebAccess · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2021 · Tags: Memory corruption
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2021-38408.md)
  `CVE-2021-38408` · CVE record: Advantech WebAccess · No CVSS score · EPSS 0.12 · Not analysed yet · Published 9 Sept 2021 · Tags: Memory corruption
- [Improper access control in Advantech WebAccess](https://agentprime.io/advisories/CVE-2019-3942.md)
  `CVE-2019-3942` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 1 Apr 2020 · Tags: Broken access control
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2020-10607.md)
  `CVE-2020-10607` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 27 Mar 2020 · Tags: Memory corruption
- [Advantech WebAccess: Advantech WebAccess 8.3.4 allows unauthenticated…](https://agentprime.io/advisories/CVE-2019-3941.md)
  `CVE-2019-3941` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Unrestricted file upload in Advantech WebAccess](https://agentprime.io/advisories/CVE-2019-3940.md)
  `CVE-2019-3940` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 9 Apr 2019 · Tags: Unrestricted file upload
- [Advantech WebAccess: Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the…](https://agentprime.io/advisories/CVE-2018-15707.md)
  `CVE-2018-15707` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 31 Oct 2018
- [Advantech WebAccess: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated…](https://agentprime.io/advisories/CVE-2018-15706.md)
  `CVE-2018-15706` · CVE record: Advantech Advantech WebAccess · No CVSS score · EPSS 0.32 · Not analysed yet · Published 31 Oct 2018
- [Advantech WebAccess: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated…](https://agentprime.io/advisories/CVE-2018-15705.md)
  `CVE-2018-15705` · CVE record: Advantech Advantech WebAccess · No CVSS score · EPSS 0.12 · Not analysed yet · Published 31 Oct 2018
- [Improper privilege management in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-14828.md)
  `CVE-2018-14828` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 23 Oct 2018 · Tags: Privilege escalation
- [External control of a file path in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-14820.md)
  `CVE-2018-14820` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 23 Oct 2018 · Tags: Path traversal
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-14816.md)
  `CVE-2018-14816` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 23 Oct 2018 · Tags: Memory corruption
- [Path traversal in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-14806.md)
  `CVE-2018-14806` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 23 Oct 2018 · Tags: Path traversal
- [Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability.](https://agentprime.io/advisories/CVE-2018-15704.md)
  `CVE-2018-15704` · CVE record: Advantech Advantech WebAccess · No CVSS score · EPSS 0.22 · Not analysed yet · Published 22 Oct 2018
- [Advantech WebAccess: Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site…](https://agentprime.io/advisories/CVE-2018-15703.md)
  `CVE-2018-15703` · CVE record: Advantech Advantech WebAccess · No CVSS score · Not analysed yet · Published 22 Oct 2018
- [Heap-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-8845.md)
  `CVE-2018-8845` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Memory corruption
- [Improper privilege management in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-8841.md)
  `CVE-2018-8841` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Privilege escalation
- [Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…](https://agentprime.io/advisories/CVE-2018-7505.md)
  `CVE-2018-7505` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: CWE-264
- [Path traversal in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-7503.md)
  `CVE-2018-7503` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Path traversal
- [SQL injection in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-7501.md)
  `CVE-2018-7501` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: SQL injection
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-7499.md)
  `CVE-2018-7499` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Memory corruption
- [Untrusted pointer dereference in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-7497.md)
  `CVE-2018-7497` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Memory corruption
- [External control of a file path in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-7495.md)
  `CVE-2018-7495` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Path traversal
- [Origin validation error in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-10591.md)
  `CVE-2018-10591` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: CWE-346
- [Advantech WebAccess: In Advantech WebAccess versions V8.2_20170817 and prior…](https://agentprime.io/advisories/CVE-2018-10590.md)
  `CVE-2018-10590` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: CWE-548
- [Path traversal in Advantech WebAccess](https://agentprime.io/advisories/CVE-2018-10589.md)
  `CVE-2018-10589` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 15 May 2018 · Tags: Path traversal
- [Unrestricted file upload in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16736.md)
  `CVE-2017-16736` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 12 Jan 2018 · Tags: Unrestricted file upload
- [Use after free in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16732.md)
  `CVE-2017-16732` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 12 Jan 2018 · Tags: Memory corruption
- [Improper input validation in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16753.md)
  `CVE-2017-16753` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 5 Jan 2018 · Tags: CWE-20
- [Untrusted pointer dereference in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16728.md)
  `CVE-2017-16728` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 5 Jan 2018 · Tags: Memory corruption
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16724.md)
  `CVE-2017-16724` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 5 Jan 2018 · Tags: Memory corruption
- [Path traversal in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16720.md)
  `CVE-2017-16720` · CVE record: Advantech WebAccess · No CVSS score · EPSS 0.50 · Not analysed yet · Published 5 Jan 2018 · Tags: Path traversal
- [SQL injection in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-16716.md)
  `CVE-2017-16716` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 5 Jan 2018 · Tags: SQL injection
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-14016.md)
  `CVE-2017-14016` · CVE record: Advantech WebAccess · No CVSS score · EPSS 0.16 · Not analysed yet · Published 6 Nov 2017 · Tags: Memory corruption
- [Untrusted pointer dereference in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12719.md)
  `CVE-2017-12719` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 6 Nov 2017 · Tags: Memory corruption
- [Uncontrolled search path in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12717.md)
  `CVE-2017-12717` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: CWE-427
- [Incorrect permission assignment in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12713.md)
  `CVE-2017-12713` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Broken access control
- [Advantech WebAccess: An Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions…](https://agentprime.io/advisories/CVE-2017-12711.md)
  `CVE-2017-12711` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Privilege escalation
- [SQL injection in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12710.md)
  `CVE-2017-12710` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: SQL injection
- [Buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12708.md)
  `CVE-2017-12708` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Memory corruption
- [Stack-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12706.md)
  `CVE-2017-12706` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Memory corruption
- [Heap-based buffer overflow in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12704.md)
  `CVE-2017-12704` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Memory corruption
- [Uncontrolled format string in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12702.md)
  `CVE-2017-12702` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Memory corruption
- [Improper authentication in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-12698.md)
  `CVE-2017-12698` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 30 Aug 2017 · Tags: Authentication bypass
- [Path traversal in Advantech WebAccess](https://agentprime.io/advisories/CVE-2017-7929.md)
  `CVE-2017-7929` · CVE record: Advantech WebAccess · No CVSS score · Not analysed yet · Published 6 May 2017 · Tags: Path traversal
- [Advantech WebAccess Unsafe ActiveX Control Marked Safe For Scripting](https://agentprime.io/advisories/CVE-2014-2368.md)
  `CVE-2014-2368` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 19 Jul 2014 · Tags: CWE-623
- [Advantech WebAccess Authentication Bypass Issues](https://agentprime.io/advisories/CVE-2014-2367.md)
  `CVE-2014-2367` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 19 Jul 2014 · Tags: CWE-592
- [Advantech WebAccess Cleartext Storage of Sensitive Information in Memory](https://agentprime.io/advisories/CVE-2014-2366.md)
  `CVE-2014-2366` · CVE record: Advantech WebAccess · CVSS 9.0 High · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2014 · Tags: CWE-316
- [Advantech WebAccess Improper Access Control](https://agentprime.io/advisories/CVE-2014-2365.md)
  `CVE-2014-2365` · CVE record: Advantech WebAccess · CVSS 6.5 Medium · Not analysed yet · Published 19 Jul 2014 · Tags: Broken access control
- [Advantech WebAccess Stack-Based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-2364.md)
  `CVE-2014-2364` · CVE record: Advantech WebAccess · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.61 · Not analysed yet · Published 19 Jul 2014 · Tags: Memory corruption
- [Advantech WebAccess Command Injection](https://agentprime.io/advisories/CVE-2014-0773.md)
  `CVE-2014-0773` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Command injection
- [Advantech WebAccess File and Directory Information Exposure](https://agentprime.io/advisories/CVE-2014-0772.md)
  `CVE-2014-0772` · CVE record: Advantech WebAccess · CVSS 5.0 Medium · Not analysed yet · Published 12 Apr 2014 · Tags: Information disclosure
- [Advantech WebAccess File and Directory Information Exposure](https://agentprime.io/advisories/CVE-2014-0771.md)
  `CVE-2014-0771` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Information disclosure
- [Advantech WebAccess Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-0770.md)
  `CVE-2014-0770` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Memory corruption
- [Advantech WebAccess Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-0768.md)
  `CVE-2014-0768` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Memory corruption
- [Advantech WebAccess Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-0767.md)
  `CVE-2014-0767` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Memory corruption
- [Advantech WebAccess Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-0766.md)
  `CVE-2014-0766` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Memory corruption
- [Advantech WebAccess Stack-based Buffer Overflow](https://agentprime.io/advisories/CVE-2014-0765.md)
  `CVE-2014-0765` · CVE record: Advantech WebAccess · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2014 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/advantech-webaccess.md?cursor=WyIyMDE0LTA0LTEyVDAxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNC0wNzY1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=advantech-webaccess>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/advantech-webaccess/>. Everything for agents: <https://agentprime.io/llms.txt>.